[Unit]
Description=Prometheus Apache Exporter
Documentation=https://github.com/Lusitaniae/apache_exporter
Wants=network-online.target
After=network-online.target httpd.service

[Service]
Type=simple
User=apache_exporter
Group=apache_exporter

ExecStart=/usr/local/bin/apache_exporter \
  --scrape_uri=http://127.0.0.1/server-status?auto \
  --web.listen-address=0.0.0.0:9117 \
  --telemetry.endpoint=/metrics

Restart=always
RestartSec=5s

NoNewPrivileges=true
PrivateTmp=true
ProtectHome=true
ProtectSystem=strict
ProtectControlGroups=true
ProtectKernelModules=true
ProtectKernelTunables=true
ProtectKernelLogs=true
LockPersonality=true
RestrictRealtime=true
RestrictSUIDSGID=true
RestrictNamespaces=true
SystemCallArchitectures=native

[Install]
WantedBy=multi-user.target